Privacy & Data Handling

Spend Market never needs to know who you are to resolve a market. That principle runs through everything below.

We never see your identity. Bank connections flow through Plaid, which tokenizes your credentials. Spend Market never sees your bank login or account numbers.

Individual transactions never appear in resolutions. Every market settles on aggregated counts and totals across the full panel. No single user's activity is ever visible in the output.

You control the data. Disconnect your bank anytime; that stops future data flow.

What we collect when you connect a bank: anonymized transaction records (merchant, amount, timestamp, category) and account balances. Nothing from accounts you didn't connect.

What we don't do: we don't sell individual-level data, share identifiable records with participants or third parties, show you other users' activity, or combine transaction data with personal identifiers for advertising or external analytics.

Retention. While connected, data supports market resolution and your promo rewards. After disconnection, your identified account link is removed. To request deletion, email [e-mail].

Security. Spend Market protects user data with controls aligned to industry standards. All data is encrypted in transit and at rest. Access to systems is restricted, logged, and reviewed, and sensitive operations are governed by least-privilege controls. Bank connections are tokenized through Plaid, so Spend Market never receives your bank credentials, and all transaction data is anonymized and aggregated before it reaches any market. Spend Market is pursuing SOC 2 Type II attestation; our security posture and audit status will be published in our trust center as they're finalized. Our auditor is Prescient Assurance.

See the full Privacy Policy for binding terms.